Abstract
The massive amount of illegal content, especially images and videos, encountered in forensic investigations requires the development of tools that can automatically recover and analyze multimedia data from seized storage devices. However, most forensic analysis processes are still done manually or require continuous human interaction. The identification of illegal content is particularly time consuming because no reliable tools for automatic content classification are currently available. Additionally, multimedia file carvers are often not robust enough – recovering single frames of video files is often not possible if some of the data is corrupted or missing. This paper proposes the combination of two forensic techniques – video file carving and robust hashing – in a single procedure that can be used for the automated recovery and identification of video content, significantly speeding up forensic investigations.
Chapter PDF
Similar content being viewed by others
References
E. Allamanche, J. Herre, O. Hellmuth, B. Froba, T. Kastner and M. Cremer, Content-based identification of audio material using MPEG-7 low level description, Proceedings of the Second International Symposium on Music Information Retrieval, 2001.
J. Fridrich and M. Goljan, Robust hash functions for digital watermarking, Proceedings of the International Conference on Information Technology: Coding and Computing, pp. 178–183, 2000.
S. Garfinkel, Carving contiguous and fragmented files with fast object validation, Digital Investigation, vol. 4(S), pp. S2–S12, 2007.
S. Garfinkel, A. Nelson, D. White and V. Roussev, Using purpose-built functions and block hashes to enable small block and sub-file forensics, Digital Investigation, vol. 7(S), pp. S13–S23, 2010.
C. Grenier, PhotoRec ( www.cgsecurity.org/wiki/PhotoRec ), 2007.
J. Haitsma, T. Kalker and J. Oostveen, Robust audio hashing for content identification, Proceedings of the International Workshop on Content-Based Multimedia Indexing, pp. 117–124, 2001.
H. Lejsek, A. Johannsson, F. Asmundsson, B. Jonsson, K. Dadason and L. Amsaleg, Videntifier forensics: A new law enforcement service for the automatic identification of illegal video material, Proceedings of the First ACM Workshop on Multimedia in Forensics, pp. 19–24, 2009.
N. Memon and A. Pal, Automated reassembly of file fragmented images using greedy algorithms, IEEE Transactions on Image Processing, vol. 15(2), pp. 385–393, 2006.
J. Oostveen, T. Kalker and J. Haitsma, Visual hashing of video: Application and techniques, Proceedings of the Thirteenth IS&T/SPIE International Symposium on Electronic Imaging, Security and Watermarking of Multimedia Contents, vol. 4314, 2001.
A. Pal, H. Sencar and N. Memon, Detecting file fragmentation points using sequential hypothesis testing, Digital Investigation, vol. 5(S), pp. S2–S13, 2008.
G. Richard III and V. Roussev, Scalpel: A frugal, high performance file carver, Proceedings of the Fifth Annual Digital Forensics Research Workshop, 2005.
M. Rogers, J. Goldman, R. Mislan, T. Wedge and S. Debrota, Computer Forensics Field Triage Process Model, Proceedings of the Conference on Digital Forensics, Security and Law, pp. 27–40, 2006.
SourceForge.net, Foremost( foremost.sourceforge.net ).
SourceForge.net, NFI Defraser ( sourceforge.net/projects/defraser ).
M. Steinebach, H. Liu and Y. Yannikos, Forbild: Efficient robust image hashing, Proceedings of the SPIE Conference on Media Watermarking, Security and Forensics, vol. 8303, 2012.
S. Vimal, Introduction to MPEG Video Coding, Lectures on Multimedia Computing, Department of Computer Science and Information Systems, Birla Institute of Technology and Science, Pilani, India, 2007.
B. Yang, F. Gu and X. Niu, Block mean value based image perceptual hashing, Proceedings of the International Conference on Intelligent Information Hiding and Multimedia Signal Processing, pp. 167–172, 2006.
B. Yoo, J. Park, S. Lim, J. Bang and S. Lee, A study of multimedia file carving methods, Multimedia Tools and Applications, vol. 61(1), pp. 243–251, 2012.
X. Zhou, M. Schmucker and C. Brown, Video perceptual hashing using interframe similarity, Proceedings of the 2006 Sicherheit Conference, pp. 107–110, 2006.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2013 IFIP International Federation for Information Processing
About this paper
Cite this paper
Yannikos, Y., Ashraf, N., Steinebach, M., Winter, C. (2013). Automating Video File Carving and Content Identification. In: Peterson, G., Shenoi, S. (eds) Advances in Digital Forensics IX. DigitalForensics 2013. IFIP Advances in Information and Communication Technology, vol 410. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-41148-9_14
Download citation
DOI: https://doi.org/10.1007/978-3-642-41148-9_14
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-41147-2
Online ISBN: 978-3-642-41148-9
eBook Packages: Computer ScienceComputer Science (R0)